Grand Theft Auto VI developer Rockstar Games has confirmed company information was accessed as part of a third-party data breach, after reports emerged this weekend that it had been hacked.
In a statement issued to IGN, a Rockstar Games spokesperson insisted “a limited amount of non-material company information was accessed,” and stressed the incident “has no impact on our organization or our players.”
Rockstar’s statement in full follows:
“We can confirm that a limited amount of non-material company information was accessed in connection with a third-party data breach. This incident has no impact on our organization or our players.”
This morning, The CyberSec Guru reported that a hacker group called ShinyHunters had used AI analytics platform Anodot, a SaaS cloud-cost monitoring tool Rockstar uses, to breach Rockstar’s Snowflake data warehouse, posing as a legitimate internal service. ShinyHunters has set a ransom deadline of April 14, demanding Rockstar pay, or the group will release the data.
The hackers allegedly did not crack Snowflake’s encryption, rather accessed Anodot’s system to obtain authentication tokens, which it then used as a digital pass key to enter Rockstar’s Snowflake instance. “if you give a tool like Anodot broad read permissions on your Snowflake warehouse and that tool gets compromised, the data is gone,” The CyberSec Guru said. “Snowflake isn’t the weak link here; the integration policy is.”
